- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 20 · 3 critical, 12 high, 5 medium
- Registry
- PyPI
Advisories 20
- CVE-2025-51464High 8.8
Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via…
Affected: through 3.30.0.dev20250611.
- CVE-2025-5321Medium 5.3
aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation
Affected: through 3.29.1.
- CVE-2024-8769Critical 9.1
Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim
Affected: from 3.15.0, through 3.27.0.
- CVE-2024-12777Medium 5.9
Denial of Service in aimhubio/aim
Affected: through 3.25.0.
- CVE-2024-8238Medium 5.9
Unrestricted Code Execution in aimhubio/aim
Affected: from 3.0.0, through 3.22.0.
- CVE-2025-0189High 7.5
Denial of Service in aimhubio/aim
Affected: through 3.25.0.
- CVE-2024-6829Critical 9.1
Arbitrary File Overwrite through tarfile-extraction in aimhubio/aim
Affected: through 3.19.3.
- CVE-2024-12778High 7.5
Denial of Service in aimhubio/aim
Affected: through 3.25.0.
- CVE-2024-8061High 7.5
Denial of Service in aimhubio/aim
Affected: through 3.23.0.
- CVE-2024-6851High 7.5
Arbitrary File Deletion in aimhubio/aim
Affected: through 3.22.0.
- CVE-2024-6483Medium 5.3
Arbitrary File/Directory Deletion in aimhubio/aim
Affected: through 3.19.3.
- CVE-2024-10110High 7.5
Denial of Service in aimhubio/aim
Affected: from 3.15.0, through 3.23.0.
- CVE-2024-7760High 7.4
CSRF in aimhubio/aim
Affected: through 3.22.0.
- CVE-2025-0190High 7.5
Denial of Service in aimhubio/aim
Affected: through 3.25.0.
- CVE-2024-8863Medium 5.3
aimhubio aim Text Explorer textbox.tsx dangerouslySetInnerHTML cross site scripting
Affected: through 3.24.0.
Show all 20 advisoriesShow fewer advisories
- CVE-2024-6578High 7.2
Stored XSS in aimhubio/aim
Affected: through 3.19.3.
- CVE-2024-6227High 7.5
Infinite Loop in aimhubio/aim
Affected: through 3.19.3.
- CVE-2024-2195Critical 9.8
Remote Code Execution in aimhubio/aim
Affected: from 3.0.0, through 3.25.0.
- CVE-2024-2196High 8.8
CSRF Vulnerability in aimhubio/aim
Affected: through 3.17.5.
- CVE-2021-43775High 8.6
Arbitrary file reading vulnerability in Aim
Affected: fixed in 3.1.0; fixed in 3.1.0.